f9b42e3 selinux_child: workaround fqnames when using DRO

Authored and Committed by fidencio 5 years ago
    selinux_child: workaround fqnames when using DRO
    
    When using domain_resolution_order the username will always be
    fully-qualified, what has been causing some SELinux issues as mappings
    for user 'admin' are not applied for 'admin@ipa.example'.
    
    In order to work this around we can take advantage that selinux_child
    queries SSSD since commit 92addd7ba and call getpwnam() in order to get
    the username in the correct format.
    
    seuser_needs_update() signature has been updated due to this change.
    
    Resolves:
    https://pagure.io/SSSD/sssd/issue/3740
    
    Signed-off-by: Fabiano FidĂȘncio <fidencio@redhat.com>
    Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>